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B. CLAIM AMENDMENTS 

1. ('Currently, A mended) A method for distributing cryptographic requests to a plurality of 
cryptographic devices comprising: 

receiving a cryptographic request; 
determining theji lowest T(N); and 

sending the cryptographic request to a cryptographic device with the lowest T(N); 
wherein a T(N) represents an estimate d time for a cryptographic device N to completely p rocess 
ail oFa plurality nf requests currently in a QfN): and 

wherei n the Of N) represents a number of requests in a nuetie for a cryptoeraphic devi ce N^s 
reciuest queue in a CH'ND device queu e tabic, 

2. (Currently Amended) The method of claim 1 further comprising: 

determining whether there is a second cryptographic request; and 

responsive to a determination that there is a second cryptographic request, determining a 
new lowest T(N); and 

sending the second cryptographic request to a cryptogra phic device with the new lowest 

T(N). 

3. (Currently Amended) The method of claim 1 further comprising: 

setting an N equal to 1; 
setting the_T(N) equal to 0; 
setting the O(N) equal to 0; 

determining whether there is another device to query: and 

responsive to a determination that Lhere is another device to query, sorting the N equal to 
theN phis 1 and returning to the step of setting the T(N) equal to 0. 
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4. LC^jrently, Amended) The method' of claim 1 further comprising: 

setting a current timc GT equal to a current system time CS¥: and 
updating all of a plurality of estimated queue item completion times, 

5. ('Currently Amended) The method of claim 1 further comprising: 

setting an estimated time E ¥ from an fi ¥ estima ted lime table; 
determining whether a Qi queue item is thean only queue it em in a^queue; and 
responsive to a determination that the O kiueue item is the only queue ite m in the 
queue, setting fche_y_ Ql queue item timestamp to a current lime Gi 1 . 

6. ("Currently Amended) The method of claim 1 further comprising: 

setting tiieN equal to I ; 

determining whether the 0(H) is empty; 

responsive to a determination that the OfN) is empty, determining whether there is 
another cry ptographic device; 

responsive to a determination that there is another cryptographic device, setting the N 
equal lo theN plus 1 and returning to the step of determining whether the OfN) is empty; 

computing a_t where the t is the time a request in a Qj. queue it em at the top of a queue 
has been processing, by subtracting *b*a time stamp from a GX current time : 

subtracting the_t from thej) OP- s queue item'? estimated completion time; 

determining whether the_a new estimated completion time is less than or equal to zero; 

responsive to a determination that the new estimated completion time is less than or equal 
to zero, setting the an estimated time to fl_-Z-_perccnt of the an original estimated time. 

7. (Currently Amended) T he method of claim 1. further comprising: 

identifying a cryptographic device associated with a QJ- qucnc item with a completed 
request; 

11 
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determining whether there are more Q£ g queue item's in a_queue for the cryptographic 
device_N; and 

responsive to a determination that there are more Qi^s queu e item's in a_queue for the 
cryptograpliic dcvice_N, calculating the _a current system time and assigning the current system 
time to febe a next Ql~ s o ucue item's tirnestamp. 

8. (Currently Am ended) A programmable apparatus for balancing the load of requests for 
cryptographic operations sent to a plurality of identical cryptographic devices comprising: 

a computer having a processor, a memory, a plurality of PCI buses, and a plurality of 
cryptographic devices connected to said PCI buses; 

a cryptographic API installed on said computer; 

a kHKfe fe load balancing program in said cryptographic APT; 

a estimated completion time subroutine in said load balancing program; 
wherein, said estimated completion time subroutine directs said processor to determine a lowest 
T(N); and 

wherein, responsive to determining ft the lowest T(N). sending a request tor a cryptographic 
operation to a cryptographic device with the lowest T(N)i 

wherein a T("N) represents an est imate d time for a crvpUmraphic device N to completely process 
a plurality of reQiiests^,urrently_in a OflvQ: and 

wherein the Q( N) represents a number of requests in a queue for t he cry ptographic device N\s 
request .queue in a 0(N) device queue t able. 

9* ( Currently Amended) The programmable apparatus of claim 8 further comprising an 
inilial^tion subroutine in said load balancing program that directs said processor to set the N 
equal to 1 , set the T(N) equal to 0, and to set the_Q(N) equal to 0. 
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10. (Currently Amended) The programmable apparatus of claim 8 further comprising a 
subroutine in the load balancing program that sets 4^4- a current lime equal to GST a current 
system time and that updates all of a plurality of estimated Qj queue item completion times. 

11. (Currently Amended"} The programmable apparatus of claim 8 further comprising a 
subroutine in the load balancing program that sets an estimated time ^ from an &T us U mated 
lime table, determines whether a Oi queue item is thean only Ql queue item in fLqueue, and 
responsive to a determination that the O tqucue item is the only Qkme ue item in the queue, sets 
fchtsa Qt queue item timestamp to a G3 r current time . 

12. (Currently Amended) The programmable apparatus of claim 8 further comprising a 
subroutine in the load balancing program that computes at whercthc t is a time that a request in 
a O t queue item at a top of a queue has been processing, by .subtracting a time stamp from a 
current time £T. 

13. (Currently Amended) The programmable apparatus of claim 8 farther comprising a 
subroutine in the load balancing program that sets thcN equal to 1 , determines whether the^Q(N) 
is empty., responsive Lo a determination that the OPT) is empty, determines whether there is 
another device, responsive to a determination that there is another device, sets theN equal to the 
N plus 1 , computes the t, where the t is a time tliat a request in a Q i queue item at a top of a 
queue has been processing, by subtracting a time stamp from a current time €¥. subtracts the t 
from the _a Qt ^ queue item ? s estimated completion time, determines whether 44**_a new estimated 
completion time is less than or equal to zero, and responsive to a determination that the new 
estimated completion time is less than or equal to zero, sets the estimated lime to a_Z percent of 
fche -_an original estimated lime. 
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14. (Currently Amended) The programmable apparatus of claim 8 further comprising a 
subroutine in the load balancing prograrnjhul identifies a cryptographic device associated with a 
0 1 queue item with a completed request, determines whether there are more ^s_q ucue item's 
in a_queue for the cryptographic device, and responsive to a determination that there are more 

queue items in the Queue for the cryptographic device, calculating thea current system time 
and assigning the current .system time to theji. next O^- s queue item's timcstamp. 

1 5. fCurrentlv Amended) A computer readable memory for causing a computer to balance the 
load of requests for cryptographic operations sent to a plurality of cryptographic devices 
comprising: 

a-memory; 

a load balancing program stored in said memory; 
the memory, so configured by said load balancing program, responsive to receiving a request 
for a cryptographic operation, causes the computer to determine a lowest T(N) f and to_send the 
cryptographic request to a cryptographic device with the lowest T(N); 

wherein a TTNQ represents an estimated time fo r a cryptogra phic device N to completely nrocess 
a plurality of requests currently in u Q(N); and 

wherein the Q(N) represents a numbc rjrf requ ests in a queue for the cryptographic device TsTs 
request queue in a Q(NT) device Queue, table , 

16. (Currently Amended) The computer readable memory of claim 15 wherein the load 
balancing program comprises an initialization subroutine in said load balancing program that 

| causes said computer to set theN equal to 1 , to_set the TOO equal to 0, and, to set the Of'Nfl equal 
to 0. 

17. (Currently Amended") The computer readable memory of claim 15 wherein the load 
balancing program comprises a subroutine in th e load bal aticiifrg-progTaffr-that sets € T .a .current 
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time equal to GSvF a current system time and ttiai updates all of a pl urality of estimated Of queue 
item completion times. 

18. (Currently Amende d) The computer readable memory of claim 15 wherein the load 
balancing program further comprises a subroutine in the load bnlanoirjjj program t hat sets an 
estimated time ET from an £ £_estimated time tabic, determines whether a € tf queue item is the 
aiLonly QKq ueue item in a.queue, and responsive to a determination that the Q ? queue item is 
the only Ql oueuc itcjn in the queue, sets the Otq ueue item timestamp to a curren t titnegC. 

J 9. (Currently Am e nded) The computer readable memory of claim IS wherein the load 
balancing program comprises a subroutine in the load balancing program that computes at where 
the t is a time a request in a Oi queue item at a top of a queue has been processing, by subtracting 
a time stamp from a current time G^. 

20. (C urrently Amended) The computer readable memory of claim 1 5 wherein the load 
balancing program further comprises a subroutine i n th e load ' balancing program that sets an N 
equal to 1 , determines whether thc.OfN) is empty, responsive to a determination that the_Q(N) is 
empty, determines whether there is another device, responsive to a determination that there is 
another device, sets rh^N equal to the N plus l f computes a.t> where the t is a time that a request 
in a (->h queue item at a top of a queue has been processing, by subtracting a time stamp from a 
current time € 4-'. subtracts the t from the QP e queue item's estimated completion time, 
determines whether the- a new estimated completion time is less than or equal to zero, and 
responsive to a determination that, the new estimated completion time is less than or equal to 
fcero, sets the-anesti mated time to ajS-perccnt of the an original estimated time. 

21. (Currently Amended) The computer readable memory of claim 15 wherein the load 
balancing program further comprises a subroutine in tho load ha l ancin g-progyaffl - that identifies a 
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cryptographic device associated with a Q fciucuc item with a completed request, determines 
whether there are more Q fo queue item's in a_queue for the cryptographic device, and 
responsive to a determination that there are more QP * queue item's in the queue for the 
cryptographic device, calculating t&ea current system time and assigning the current system time 
to tkea next QPs qucue_ilcm limestamp. 

22* (Currently Amended) A computer implemented process to balance the load of requests for 
cryptographic operations sent to a plurality of cryptographic devices, comprising: using a 
computer, performing the following scries of Steps: 

recei ving a cryptographic request; 

setting anN equal to 1 ; 

setting a_T(N) equal to 0; 

setting a_Q(N) equal to 0; 

determining whether the Q(N) is empty; 

responsive to a determination that the_Q(N) is empty, determining whether there is 
another device; 

responsive to a determination that there is another device, setting the N equal to the N 
plus 1 and returning to the step of determining whether the, Q(N) is empty; 

computing aj where thej is the_c| time a request at the_a top of tkejx queue has been 
processing by subtracting *J*5_a time stamp frorna current time : 

suhlructing the t from the a cryptographic request's estimated completion time; 

determining whether theji new estimated completion time is less than or equal to zero; 

responsive to a. determination that the new estimated completion lime is less than or equal 
to zero, setting the an estimated time to a_Z percent of the an original estimated time; 

responsive to a determination that the new estimated time is greater than zero, 
determining whether there is another device to queiy; 
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responsive to determining that there is another device to query, returning to the step of 
determining whether the.Q(N) is emply; and 

identifying the a cryptographic device associated with #*e_a compictcd request; 
determining whether there are more CHs queue items in acjueue; 

responsive lo a determination that there are more Qfc_queue litems in the queue, 
calculating #»ej) current system time and assigning the current system time to the_a next 
queue item's limeslamp; 

setting G t a current time equal to GS¥ a c urrent system lime : 

updating all of a plurality of estimated completion times; 

determining th e a cryptographic device with tbeja lowest T(N); and 

sending the cryptographic request to a device with the lowest T(N)l 
wherein the U N) represents an e stimated time for a cryptographic device N to completely 
process a plurality of requests currently in the Of'N) : 

wherein the 0(H) represents a number of requests, in , a .queue for the cryptographic device N's 
re quest queue in a O(N) device queue table: and 
wherein the Z is determined bv an admin istrator 

| 23, (Cun < ently_A niended) The computer implemented process of claim 22 further comprising: 
determining whether there is another device to query; 

responsive to a determination that there is another device to query, setting N equaJ to N 
plus 1 and returning to the step of setting the T(N) equal to 0. 

determining whether there is a second cryptographic request; 

responsive to a determination that there is a second cryptographic request, determining a 
new lowest T(N); and 

sending the second cryptographic request to a cryptographic device with the lowest T(N). 
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